Systems and methods for the prevention of unauthorized use and manipulation of digital content

• US 8,117,667 B2
• Filed: 01/10/2008
• Issued: 02/14/2012
• Est. Priority Date: 05/09/2001
• Status: Active Grant

• Current Assignee: SCA IPLA Holdings Incorporated (Sony Group Corp.)
• Original Assignee: SCA IPLA Holdings Incorporated (Sony Group Corp.)
• Inventors: Merkle, James A. Jr., LeVine, Richard B., Lee, Andrew R., Howard, Daniel G., Goldman, Daniel M., Pagliarulo, Jeffrey A., Hart, John J. III, Bouza, Jose L.
• Primary Examiner(s): DADA, BEEMNET W
• Application Number:
  US12/008,320
• Publication Number:
  US 20080178299A1
• Time in Patent Office: 1,496 Days
• Field of Search: 726/29, 726/30, 726/22, 726/23, 726/28, 726/31, 713/165, 713/167, 713/188, 713/193
• US Class Current: 726/29
• CPC Class Codes: G06F 12/08 in hierarchically structured memory systems, e.g. virtual memory systems
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures

Abstract

A number of systems and methods, alone, or in combination, achieve various levels of protection against unauthorized modification and distribution of digital content. This encompasses at least unauthorized study, modification, monitoring, reconstruction, and any other means for subversion from the originally intended purpose and license model of the digital content. The invention combines a number of techniques that in whole, or in part, serve to protect such content from unauthorized modification, reconstructive engineering, or monitoring by third parties. This is accomplished by means of methods which protect against subversion by specific tools operating on specific platforms as well as general tools operating on general platforms. Specific time domain attacks are identified, code modification can be identified and reversed, and virtual and emulated systems are identified. In addition, identification of in-circuit emulator tools (both software and hardware), debuggers, and security threats to running programs can be achieved.

Claims

1. A method for preventing unauthorized use of digital content data in a computer system comprising:

examining system devices that are operational in the computer system to determine features of hardware included in the system devices;

determining whether the computer system is a virtual machine or emulation;

generating a signature unique to the computer system based on the features of the hardware included in the system devices of the computer system;

encrypting the digital content data using the signature unique to the computer system based on the features of the hardware included in the system devices, wherein the encrypted digital content is specific to the computer system; and

preventing distribution of the digital content to the computer system if the computer system is determined to be a virtual machine or emulation.

2. The method of claim 1, wherein the features of the hardware comprise at least one of memory capacity, CPU clock rate, bus rate, component version, bus latency, and memory speed.

3. The method of claim 1, further comprising encrypting the signature before encrypting the digital content data with the signature.

4. The method of claim 1, wherein the signature comprises combined multiple features corresponding to hardware of multiple system devices.

5. The method of claim 1, further comprising controlling installation of the digital content data based on the signature.

6. The method of claim 1, further comprising controlling operation of the digital content data on the system based on the signature.

11. The method of claim 1, further comprising decrypting the digital content by using the signature as a decryption key.

12. The method of claim 1, further comprising:

generating numeric values from the features of the hardware; and

generating the signature by combining the numeric values.

7. A method for preventing unauthorized use of digital content data in a computer system comprising:

requesting an installation of the digital content data at a client;

examining system devices of the client that are operational in the client to determine features of hardware included in the system devices of the client;

determining whether the client is a virtual machine or emulation;

generating a signature representative of the client based on the features of the hardware included in the system devices of the client;

transmitting the request for installation to a server, said request including the signature;

verifying, at the server, whether the requested installation is authorized, if the installation is unauthorized, transmitting an installation denial message to the client, and if the installation is authorized, transmitting an installation authorization message to the client;

installing the digital content data at the client if the requested installation is authorized; and

preventing distribution of the digital content to the client if the client is determined to be a virtual machine or emulation.

8. The method of claim 7, further comprising verifying, at the server, authorization of the installation based on the signature.

13. The method of claim 7, wherein the features of the hardware comprise at least one of memory capacity, CPU clock rate, bus rate, component version, bus latency, and memory speed.

15. The method of claim 7, further comprising:

determining whether a number of previously authorized installations exceeds a predetermined number greater than 1.

9. A method for preventing unauthorized use of digital content data in a computer system comprising:

requesting use of the digital content data at a client;

examining system devices of the client that are operational in the client to determine features of hardware included in the system devices of the client;

determining whether the client is a virtual machine or emulation;

generating a signature representative of the system based on the features of the hardware included in the system devices;

transmitting the request for use to a server, said request including the signature;

verifying, at the server, whether the requested use is authorized, if the installation is unauthorized, transmitting a use denial message to the client, and if the installation is authorized, transmitting a use authorization message to the client;

utilizing the digital content data at the client if the requested installation is authorized; and

preventing distribution of the digital content to the client if the client is determined to be a virtual machine or emulation.

10. The method of claim 9, further comprising verifying, at the server, authorization of the use based on the signature.

14. The method of claim 9, wherein the features of the hardware comprise at least one of memory capacity, CPU clock rate, bus rate, component version, bus latency, and memory speed.

16. The method of claim 9, further comprising:

determining whether a number of previously authorized installations exceeds a predetermined number greater than 1.